CVE-2025-41257: Suprema BioStar 2 Insecure Password Change
Suprema’s BioStar 2 in version 2.9.11.6 allows users to set new password without providing the current one. Exploiting this flaw combined with other vulnerabilities can lead to unauthorized account access and potential system compromise.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-41257?
CVE-2025-41257 is rated as high severity due to the potential for unauthorized account access.
How do I fix CVE-2025-41257?
To fix CVE-2025-41257, ensure users are required to provide their current password before changing to a new password.
What software is affected by CVE-2025-41257?
CVE-2025-41257 affects Suprema BioStar 2, specifically version 2.9.11.6.
What are the potential risks associated with CVE-2025-41257?
Exploiting CVE-2025-41257 can lead to unauthorized account access and possible system compromise.
Is there a known exploit for CVE-2025-41257?
While specific exploits may not be publicly available, the vulnerability's nature poses a significant risk if combined with other weaknesses.